Cybercriminals Utilize Cracked Software Security

In some recent cyber thefts, credit card data has been stolen using cracked security software. A May 2014 Arbor Threat intelligence brief explores the recent security breaches at Target, Neiman-Marcus and others. Their research uncovered the use of Card Recon, an important security auditing tool. Apparently, cybercriminals got access to a validated copy of Card Recon and used the software to search out credit card numbers.

According to the report, ”Card Recon (is) a useful tool when wielded by an auditor or security staff, but it is clearly dangerous in the wrong hands.” Arbor Networks explain that the presence of Card Recon is a “sign of trouble” because “attackers are after car data anywhere they can find it.

Card Recon is an important auditing tool used by over 300 security auditors around the world. This tool is used for security compliance measures by scanning every single file on any Server, Workstation or supported storage device for credit card data that could easily be stolen. As a security tool, Card Recon is invaluable. In the hands of of criminal, this cracked security software can become dangerous. According to Arbor, the recent point-of-sale attacks appear to have utilized two cracked copies of Card Recon.

Stephen Cavey of Ground Labs, Inc., the make of Card Recon, explains that Card Recon requires a valid license to use. Somehow the criminals obtained two validated copies in their attack. ”This is the unfortunate reality for all software vendors: It is common for criminals to acquire a copy of commercial software via unauthorized means and then reverse engineer that software to circumvent the licensing mechanisms that are designed to prevent its unauthorized use.”

The post Cybercriminals Utilize Cracked Software Security appeared first on Integracon Technologies Blog – Computer Support in Knoxville, TN.